Grade VIII Data Protection Assessment and Compliance Manager

Tusla - Child and Family Agency; Ireland; On-site; EUR 70,000 - 100,000; Full time

Job summary

Tusla - Child and Family Agency is seeking a Data Protection professional to join its Data Protection Unit. The role focuses on assessing and advising on privacy compliance across Tusla's data landscape and governance framework.

You will work with internal and external stakeholders to design data sharing, conduct DPIAs, monitor metrics, and ensure regulatory alignment with GDPR and Irish Data Protection Act. A Level 8 qualification and strong cross-functional experience are essential.

Qualifications

• Minimum Level 8 qualification in a relevant discipline and/or a formal Data Protection qualification.
• At least 3 years' experience of risk based compliance frameworks, including control design and mitigation.
• Experience with GDPR and Irish Data Protection Act 2018.
• Experience cross-functionally with multiple internal and external stakeholders.
• Good character and high suitability for the office.

Responsibilities

• Assess and explain Tusla's data protection and privacy compliance requirements across its data landscape and operating environment.
• Conduct desktop and in-person assessments of third party measures to ensure data security.
• Design and implement data sharing arrangements to govern personal data sharing.
• Conduct Data Protection Impact Assessments to assess processing activities for legality, fairness, transparency and proportionality.
• Manage analysis and provision of monthly, quarterly and yearly data protection compliance metrics.

Skills

Data protection

Risk-based compliance

Stakeholder management

Education

NFQ Level 8 qualification

Data Protection qualification

Job description

Job Summary

The Child and Family Agency was established on 1st January 2014 and is responsible for a range of statutory functions including provision of child protection, alternative care, specified regulatory services and a range of family support services. The Agency has commenced a major improvement programme with significant focus on Practice, Culture and Structure.

The Agency currently has responsibility for a budget of circa €1.2billion and delivers its services through over 5,500 people in 259 locations across the Country.

The Child and Family Agency has responsibility for the following range of services:

• Child Protection and Welfare
• Parenting, Family Support and Early Help Services
• Alternative Care
• Birth Information & Tracing and Adoption
• Tusla Education Support Services (TESS)
• Children's Service Regulation
• Counselling and Therapeutic Supports

Further information is available on www.tusla.ie

Data Protection Unit

Tusla processes a large volume of highly sensitive personal data on a daily basis in order to deliver the critical services it provides to Children and Families across the State. In doing this, Tusla must ensure that it has adequate organisational and technical measures in place; that the rights and freedoms of Tusla service users are respected and that privacy risks to those rights and freedoms are minimised; and that a fit for purpose operating model for Data Protection and FOI is implemented.

Job Objectives

Main Duties and Responsibilities

• Play a key role in assessing, understanding and explaining Tusla's data protection and privacy compliance requirements across its data landscape and operating environment.
• Complete desktop and in-person assessments of third party technical and organisational measures to ensure appropriate security of Tusla personal data and to mitigate any data protection risks identified.
• Through engagement with internal and external stakeholders, design and implement appropriate data sharing arrangements to govern the sharing of personal data.
• Conduct Data Protection Impact Assessments to assess and advise on data processing activities to ensure they are lawful, fair, transparent and proportionate.
• Manage the analysis and provision of monthly, quarterly and yearly data protection compliance metrics.

Team Effectiveness

• Provide expert advice, oversight and assurance to ensure the lawful handling of personal data across Tusla's functions.
• Escalate any high risk items to the relevant General Manager and provide regular updates.
• As required, deputise for the relevant General Manager.
• Manage assigned team members including through work prioritisation and output, personal development and performance.

Stakeholder Engagement

• Collect, organise and objectively evaluate complex data to create clear, practical and evidence based data protection recommendations and controls for internal and external stakeholders.
• Support data protection training and awareness initiatives to support consistent compliance including through the development and provision of SME content.
• Contribute to the development and communication of policies, procedures, and guidelines to support privacy compliance across Tusla.
• Ensure Tusla's Record of Data Processing Activities is kept comprehensive, current and accurate.
• Develop, format, and edit high-impact presentations for senior leadership meetings.
• Build relationships with internal stakeholders including Service Directors, Network Managers, Business Managers, Tulsa Legal Department and other DPU Managers.
• Build relationships with external stakeholders including other state agencies, government departments and third-party service providers.
• Engage regularly with stakeholders to identify areas of improvement.

Health & Safety

• Comply with and contribute to the development of policies, procedures, guidelines and safe professional practice and adhere to relevant legislation, regulations and standards.
• Have a working knowledge of the Health Information and Quality Authority (HIQA) Standards as they apply to the service for example National Standards for Child Protection and Care and comply with associated Tusla - Child and Family Agency protocols for implementing and maintaining these standards as appropriate to the role.
• To support, promote and actively participate in sustainable energy, water and waste initiatives to create a more sustainable, low carbon and efficient health service.

The above Job Description is not intended to be a comprehensive list of all duties involved and consequently, the post holder may be required to perform other duties as appropriate to the post which may be assigned to him/her from time to time and to contribute to the development of the post while in office.

Skills Requirement

Applicants must by the closing date of application have the following:

• Have a minimum Level 8 qualification on the National Framework of Qualifications in Ireland (or equivalent in another jurisdiction) in a relevant discipline and / or have a formal Data Protection qualification.
• Have at least 3 years' experience of risk based compliance frameworks, including control design, risk identification and mitigation implementation, preferably in the area of data protection.
• Provide one example that demonstrates significant experience of one of the following:
  • Practical knowledge of the law and practice of the General Data Protection Regulation and the Irish Data Protection Act 2018.
  • Experience of compliance reporting processes and communications including the collation, interpretation and presentation of key metrics to senior management, supervisory authorities or governance bodies, preferably in the area of data protection.
• Experience of managing and working collaboratively cross functionally with multiple internal and external stakeholders, as relevant to this role.
• Have the requisite knowledge and ability (including a high standard of suitability and management ability) for the proper discharge of the duties of the office.

Health

A candidate for and any person holding the office must be fully competent and capable of undertaking the duties attached to the office and be in a state of health such as would indicate a reasonable prospect of ability to render regular and efficient service.

Character

Each candidate for and any person holding the office must be of good character.